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(B1) ... RANDOM 

(B2) ... INCREMENT OR SUBTRACTED VALUE 



(57) Abstract: The inventive method for performing a cryptographic operation by a device controlled by the security application 
executed outside thereof consists in producing a cryptographic value (y) in the device by a calculation comprising at least one multi- 
plication between first and second factors containing a security key (s) associated with the device and a challenge number (c) provided 
by the security application. The first multiplication factor comprises a determined number of bits (L) in a binary representation. The 
^s^l second factor is constrained in such a way that it comprises; in a binary representation, several bits at 1 with a sequence of at least 
L-1 bits at 0 between each pair of consecutive bits to 1 and the multiplication is carried out by assembling the binary versions of the 
first factor shifted according to positions of the bits at 1 of the second factor, respectively. 
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cutee en dehors du dispositif, on produit une valeur cryptographique (y) dans le dispositif, par un calcul comprenant au moins une 
multiplication entre des premier et second facteurs incluant une cle secrete (s) associee au dispositif et un nombre (C ) dit challenge 

fourni par 1' application de securite. Le premier facteur de la multiplication comprend un nombre de bits determine L en representa- 
tion binaire. On contraint le second facteur pour qu'il comprenne, en representation binaire, plusieurs bits a (1) avec, entre chaque 
paire de bits a (1) consecutifs, une sequence d'au moins L-1 bits a (0), et en ce que la multiplication est realisee en assemblant des 
versions binaires du premier facteur respectivement decalees conformement aux positions des bits a (1) du second facteur. 
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